Privacy

Privacy Policy

Updated 28 September 2026

This policy describes personal information used by MediRun's marketplace and delivery service. Health, identity and precise location data are sensitive; provide only what a feature needs.

1. Information used by the service

  • Account and order details such as name, email, phone number, delivery address, coordinates, items, payment reference and order status.
  • Health information you choose to save, including allergies, emergency details, conditions and uploaded prescription files.
  • PCN/CAC documents and registration details submitted by pharmacy applicants, and NIN/government ID documents submitted by rider applicants.
  • Location data used for address lookup, delivery estimates, live order tracking and nearby-rider features when those features are used.
  • Messages and images submitted to the AI health assistant or interaction tool, plus voice recordings and transcripts when you use voice chat.

2. How information is used

We use information to create and secure accounts, review partner applications, show listings, process and support orders and payments, coordinate deliveries, respond to complaints, operate requested features, prevent misuse, and meet legal obligations. Location is used for the location-based feature you request and to coordinate an order.

The AI feature sends the messages and any images you submit to OpenRouter for processing by a selected model provider. Do not include names, contact details, prescription images or other identifying information unless you choose to share it. AI responses are not a substitute for professional care.

If you use voice chat, your browser may use its speech recognition service to transcribe your speech, or record audio after you allow microphone access and send that recording to OpenRouter's transcription service. MediRun then sends the transcript to its chat model. Spoken replies use your browser's speech engine when available. MediRun does not store voice recordings or generated speech audio.

3. Who receives information

To operate the service, information may be processed by the providers configured for the app, including MongoDB for the application database, Cloudinary for pharmacy and rider onboarding documents, Paystack for payment processing, OpenRouter and its selected model provider for AI requests, and OpenStreetMap/Nominatim or OSRM for map, address and route features. Their processing may occur outside your country; the app does not currently display a per-provider processing location or retention schedule.

OpenRouter and its selected transcription provider process audio when server transcription is used. When browser speech recognition is used, the browser's speech service may process your speech under its own privacy and retention practices.

Order details needed to fulfill an order are shared with the selected pharmacy and, when assigned, the delivery rider. Live delivery information may be shown to participants in that delivery. Health profiles and prescription files saved under Health Records are stored against your account; the current order flow does not attach those files to an order or expose them to a pharmacy for prescription review.

Payment card details are entered with the payment provider. MediRun stores order payment status and provider reference information needed to reconcile the transaction; do not send card details to MediRun support.

4. Storage, access and retention

Health profiles and prescription file contents are stored in the application database. The health-record endpoints require the account owner to sign in and restrict retrieval or deletion to that owner. Pharmacy and rider verification documents are uploaded to Cloudinary during onboarding. Security protections and storage location depend in part on the hosting and service-provider configuration; this policy does not promise a particular encryption standard.

We keep information for as long as needed to provide the service, resolve issues, meet legal obligations and protect legitimate rights. A fixed retention period for each data category is not currently published in the app. You can request access, correction or deletion by emailing [email protected]; some records may need to be retained where the law requires it.

5. Your choices and rights

You can edit account information and manage health-record files in the app where those controls are available. You may contact us to request access, correction, deletion, restriction or other rights available under applicable data-protection law. You may also complain to the Nigeria Data Protection Commission. We will verify a request before acting on it.

6. Contact

Privacy requests: [email protected]. The contact page opens a draft in your email app; it does not itself send or store your message. Do not include emergency information in a support request.

See the Terms of Service. Before launch, MediRun must confirm its data-controller legal name and address, provider locations and contracts, retention periods, secure document access, and the appropriate privacy contact with Nigerian counsel.